ManageEngine Applications Manager 13 - SQL Injection Vulnerability

Exploit for windows platform in category web applications ManageEngine Applications Manager version 13 suffers from multiple post-authentication SQL injection vulnerabilities. Proof of Concept 1 name= parameter is susceptible: POST /manageApplications.do?method=insert HTTP/1.1 Host:...

PT-2017-15587

Name of the Vulnerable Software and Affected Versions Circle with Disney affected versions not specified Description The issue concerns the firmware update functionality, where specially crafted network packets can cause the product to execute an attacker-supplied shell script. An attacker can...

PT-2017-15591

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description An issue exists in the torlist update functionality, allowing specially crafted network packets to cause the product to run an attacker-supplied shell script. An attacker can intercept and alter...

PT-2017-15611

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description An exploitable authentication bypass issue exists in the API daemon. A specially crafted token can bypass the authentication routine of the Apid binary, causing the device to grant unintended...

PT-2017-15613

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description An issue exists in the "/api/CONFIG/restore" functionality where specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can trigger this issue by sending an HTT...

PT-2017-15593

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description An issue exists in the database update functionality, allowing specially crafted network packets to cause the device to execute arbitrary code. An attacker must impersonate a remote server to trigge...

PT-2017-15597

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description A Denial of Service issue exists in the API daemon. It can be triggered by a large amount of simultaneous TCP connections, causing the daemon to repeatedly fork and run out of memory, leading to a...

PT-2017-15586

Name of the Vulnerable Software and Affected Versions Circle with Disney affected versions not specified Description The issue concerns the generation of authentication tokens in Circle with Disney, where specially crafted network packets can lead to a valid authentication token being returned to...

PT-2017-15588

Name of the Vulnerable Software and Affected Versions Circle with Disney affected versions not specified Description An issue exists in the "/api/CONFIG/backup" functionality, where specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigge...

Beers with Talos EP 16: Strong Copy - Bad Rabbit and the Nyetya Connection

Beers with Talos BWT Podcast Episode 16 is now available. Download this episode and subscribe to Beers with Talos:img border="0" data-original-height="45" data-original-width="160" src="https://2.bp.blogspot.com/-E-RSSZ9jbUY/WaWCkLGZnZI/AAAAAAAAAJE/Ciiz-Si...

Circle with Disney Command Injection Vulnerability (CNVD-2017-32880)

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A command injection vulnerability exists in the /api/CONFIG/restore function in Circle with Disney version 2.0.1. The vulnerability can ...

Circle with Disney SSL TLD Man-in-the-Middle Attack Vulnerability (CNVD-2017-33188)

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. An SSL TLD man-in-the-middle attack vulnerability exists in the filtering feature in Circle with Disney version 2.0.1. An attacker could...

Circle with Disney Authentication Bypass Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. An authentication bypass vulnerability exists in the API daemon in Circle with Disney version 2.0.1. An attacker could bypass the...

Circle with Disney Remote Access Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A remote access vulnerability exists in the remote control feature of Circle with Disney version 2.0.1. A remote attacker can exploit th...

Circle with Disney Command Injection Vulnerability (CNVD-2017-32884)

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A command injection vulnerability exists in the /api/CONFIG/backup function in Circle with Disney. The vulnerability can be exploited to...

Circle with Disney Security Bypass Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A security bypass vulnerability exists in the signature verification of the firmware update feature in Circle with Disney version 2.0.1...

Circle with Disney Information Disclosure Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. An information disclosure vulnerability exists in the apid daemon in Circle with Disney version 2.0.1. The vulnerability can be exploite...

Circle with Disney Command Injection Vulnerability (CNVD-2017-33185)

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A command injection vulnerability exists in Circle with Disney. An attacker could exploit this vulnerability by intercepting and alterin...

Circle with Disney Denial of Service Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A denial of service vulnerability exists in the user photo upload feature in Circle with Disney version 2.0.1. The vulnerability can be...

Circle with Disney Authentication Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. An authentication vulnerability exists in the authentication token generation feature in Circle with Disney. An attacker can exploit thi...